MAL-2025-152356 Malicious code in alita-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d23e87cfccc188d933fe25aebbfa9c1a18f4e7a9fcb0ef2ee2a5b881eabddfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151159 Malicious code in aben-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837b2b947c5db72beb0597dfbf4a6d65c58206f21b1da94d8b60835bf010f006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162954 Malicious code in nokire-loklok95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f5d68df0721388f8e3054de3b51e805440682ce543447d6cd858f0b4f0ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168577 Malicious code in tealove-nokire48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178231c2a2821d70f902b11df8715585e8ed616519e4b445639afddd7bd7bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163217 Malicious code in nokire-nana61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e0f621f695516df41f17879b6c130bc0132eed30c5fc970fe655df3ccbd11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169676 Malicious code in ucok-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48239d5501ccd47874a4d9b21adac67494c96d2e4fb7bbb3a3353f2eb37b4fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aisx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbe989d4a3c83e6e120123cbb4a8dec1bf62fa06fce9fc4764788e23e484735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-abila-aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac97fbc1cbf9a928528f94021e7400fb4733963cc891d3dfd795bb0697effcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ff435c2d8ba0b30129d29df0e61bcfb1ca7862f793ae33a01c862adb7d7921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3730ff873ec4abb1c671754e0191c926e8c106fe67eee8e5b70c8168cef6dc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3157d282d8fb5f3674fc5ab9ecbdc2d12df4bb3651d74ea73f15dc9fe582f3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-mfie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c454b75b66fd77123e67afb844b9ddfb203193877b028d175c0831a351876c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-technical-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6eec2766ab6b56ea02aff183e67137cb626df3df8958bf17be93991b153af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990de35ee357135d32f70c34d0634b86de15a13c657ad67b47c5b94bbbb2458e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae41b99102203ac6976c23723936af83b7d96195453a41be487d27b68e7a725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke151 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1e863812009a74e9569d88f4581d56514644211eb4abf7428c36ad711a78f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbec3e9e363edf830cff77f8b0fe40340aa7e6d8c97884519f109ec0e80f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab23f0e69db76fdcdead4890a76a74a1853ef6b25c5fb5b87a6c70b4935e5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...